We are the controller in accordance with current privacy legislations. The User’s personal data is processed with the purpose of managing and facilitating recruitment of employees to our business.
2. Collection of personal data
We are responsible for the processing of the personal data that the User contributes to the Service, or for the personal data that we in other ways collect with regards to the Service.
When and how we collect personal data
We collect personal data about Users from User when User;
- makes an application through the Service or otherwise;
- adds personal data either personally or by using a third-party source such as Facebook or LinkedIn;
- uses the Service to connect with our staff; or
- provides identifiable data in a chat platform (provided through the website that uses the Service) and such data is relevant to the recruitment application.
We collect data from third parties, such as Facebook, LinkedIn and through other public sources. This is referred to as “Sourcing” and can either be manually performed by our employees or automatically through the Service.
The types of personal data collected and processed
The categories of personal data that can be collected through the Service can be used to identify natural persons from names, e-mails, pictures and videos, information from Facebook and LinkedIn accounts, answers to questions asked during the recruitment process, titles, education and other information that the User or others have provided through the Service. Only data that is relevant for the recruitment process is collected and processed.
Purpose and lawfulness of processing
The purpose of the collecting and processing personal data is to manage recruitment. We strive to ensure that the process complies to the legal framework while simplifying and facilitating the recruitment process.
Personal data that is processed with the purpose of aggregated analysis or market research is always made unidentifiable. Such personal data cannot be used to identify a certain User. Thus, such data is not considered personal data.
The consent of the data subject
The User hereby consents to the processing of personal data for the purpose of Controller’s handling the recruitment process. The User also consents that personal data is collected through the Service, when User:
- makes an application through the Service,
- adds personal data either personally or by using a third-party source as Facebook or LinkedIn, and that Controller may use external sourcing tools to add that additional information; and
- uses the Service to connect to Controller’s recruitment department.
The User also consents to the Controller collecting and compiling publicly available information about the User for use in recruitment purposes.
The User consents to the personal data collected above will be processed in accordance to “Storage and Transfers” and “How Long Personal Data Will Be Processed” sections below.
User has the right to withdraw the consent at any time by contacting Controller as set out in Section 9. Invoking this right may however mean that the User cannot apply for a job or otherwise use the Service.
Storage and Transfers
Personal data collected through the Service may be (a) stored, processed and accessed from within the European Union (EU) or European Economic Area (EEA) or any country that is considered by the European Commission to have an adequate level of protection, or (b) processed by suppliers that have entered into a binding agreements that complies with the lawfulness of third country transfers (as Privacy Shield) or to other suppliers where the adequate safeguards are in place in order to protect the rights of the data subjects whose data is being transferred. To obtain documentation regarding such adequate safeguards, please contact us as set out in Section 9.
How long personal data will be processed
Unless User objects to the processing of personal data, personal data will be stored and processed for period we deem necessary for the purpose(s) stated above. We note User may be interested for consideration of future recruitment. Therefore, we may store User’s personal data until we deem such to be no longer of value for future recruitment. If you wish not to have your personal data processed for future recruitment, please contact us as set out under Section 9.
3. Users’ rights
User has the right to request information about the personal data processed by us by notifying in writing as set out in Section 9 below. User has the right to request a copy of the processed personal data once without any charge. For further request, Controller has the right to charge a reasonable administrative fee.
User has the right to request for rectification of inaccurate personal data by contacting us as set out in Section 9.
User has the right to demand for deletion or reasonable restriction of processing personal data, and the right to object to processing based on legitimate interest under reasonable circumstances.
User has the right to revoke any consent to processing that has been given by User to Controller. Invoking this right may however mean that User cannot apply for a specific job or otherwise use the Service.
User has, under certain circumstances, right to data portability which means right to obtain and transfer the personal data to another controller so long as that does not negatively affect the rights and freedoms of others.
User has the right to lodge a complaint to the supervisory authority regarding the processing of personal data if the User considers that the processing of personal data infringes the framework of privacy law.
However, transfer of information over the internet and mobile networks entails risk. It is important that Users exercise caution to ensure their data is protected. Users are responsible to keep login information secured.
5. Transfer of personal data to third party
We will not sell or otherwise transfer Users’ personal data to third parties.
We may however transfer Users’ personal data to:
- our contractors and sub-contractors acting as our Processors and Sub-Processors in accordance with our instructions for the provision of the Service;
- authorities in criminal cases or when illegal behaviour is suspected; and
- authorities if required by law or court.
We will only transfer Users’ personal data to third parties that we have confidence in. We carefully choose partners to ensure that the User’s personal data is processed in accordance to current privacy legislations. We cooperate with the following categories of processors of personal data; the provider of Service, server and hosting companies, e-mail reference companies, video processing companies, information-sourcing companies, analytical service companies and other companies related to the supply of Service.
6. Aggregated data (non-identifiable personal data)
We may share aggregated data with third parties. Aggregated data is compiled from information that has been collected through the Service and can, for example, consist of statistics of internet traffic or the geographical location when using the Service. Aggregated data does not contain any information that can be used to identify individual persons and therefore is not personal data per se.
For questions, further information on how we handle personal data and other matters, please contact your Knauf representative.